https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:51:15 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-04243 cnvd-2016-04243 https://cve.radiocsirt.org/vuln/cnvd-2016-04243 https://cve.radiocsirt.org/vuln/euvd-2026-84881 EUVD-2026-84881 https://cve.radiocsirt.org/vuln/euvd-2026-84881 https://cve.radiocsirt.org/vuln/fkie_cve-2016-4989 <p>setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by (1) triggering an SELinux denial with a crafted file name, which is handled by the _set_tpath function in audit_data.py or via a crafted (2) local_id or (3) analysis_id field in a crafted XML document to the run_fix function in SetroubleshootFixit.py, related to the subprocess.check_output and commands.getstatusoutput functions, a different vulnerability than CVE-2016-4445.</p> <p>setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by (1) triggering an SELinux denial with a crafted file name, which is handled by the _set_tpath function in audit_data.py or via a crafted (2) local_id or (3) analysis_id field in a crafted XML document to the run_fix function in SetroubleshootFixit.py, related to the subprocess.check_output and commands.getstatusoutput functions, a different vulnerability than CVE-2016-4445.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-4989 https://cve.radiocsirt.org/vuln/ghsa-585r-x79p-835g <p>setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by (1) triggering an SELinux denial with a crafted file name, which is handled by the _set_tpath function in audit_data.py or via a crafted (2) local_id or (3) analysis_id field in a crafted XML document to the run_fix function in SetroubleshootFixit.py, related to the subprocess.check_output and commands.getstatusoutput functions, a different vulnerability than CVE-2016-4445.</p> <p>setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands by (1) triggering an SELinux denial with a crafted file name, which is handled by the _set_tpath function in audit_data.py or via a crafted (2) local_id or (3) analysis_id field in a crafted XML document to the run_fix function in SetroubleshootFixit.py, related to the subprocess.check_output and commands.getstatusoutput functions, a different vulnerability than CVE-2016-4445.</p> https://cve.radiocsirt.org/vuln/ghsa-585r-x79p-835g https://cve.radiocsirt.org/vuln/gsd-2016-4989 gsd-2016-4989 https://cve.radiocsirt.org/vuln/gsd-2016-4989 https://cve.radiocsirt.org/vuln/rhsa-2016:1267 <p>setroubleshoot-plugins: insecure commands.getstatusoutput use in the allow_execmod plugin setroubleshoot: insecure use of commands.getstatusoutput in sealert setroubleshoot-plugins: insecure commands.getoutput use in the allow_execstack plugin setroubleshoot: command injection issues</p> <p>setroubleshoot-plugins: insecure commands.getstatusoutput use in the allow_execmod plugin setroubleshoot: insecure use of commands.getstatusoutput in sealert setroubleshoot-plugins: insecure commands.getoutput use in the allow_execstack plugin setroubleshoot: command injection issues</p> https://cve.radiocsirt.org/vuln/rhsa-2016:1267 https://cve.radiocsirt.org/vuln/rhsa-2016:1293 <p>setroubleshoot-plugins: insecure commands.getstatusoutput use in the allow_execmod plugin setroubleshoot-plugins: insecure commands.getoutput use in the allow_execstack plugin setroubleshoot: command injection issues</p> <p>setroubleshoot-plugins: insecure commands.getstatusoutput use in the allow_execmod plugin setroubleshoot-plugins: insecure commands.getoutput use in the allow_execstack plugin setroubleshoot: command injection issues</p> https://cve.radiocsirt.org/vuln/rhsa-2016:1293